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Claims: 



1 1 . (Currently amended) A method for protecting a computing device from 

2 potentially harmful code in a document, the method comprising: 

3 receiving a data structure representation of the document; 

4 providing one or more definitions of potentially harmful active 

5 content in an editable text configuration file, each definition identifying 

6 potentially harmful active content and specifying an action to be 

7 performed on that potentially harmful active content if that potentially 

8 harmful active content is found in the document; 

9 parsing the editable configuration file to generate a data structure 

10 representation of the one or more definitions in the editable configuration 

11 file; 

12 comparing the data structure representation of the document with 

13 the data structure representation of the one or more definitions of 

14 potentially harmful active content e ach d e finition of pot e ntially harmful 

15 active content in the editable text file to identify potentially harmful 

16 active content within the document; and 

17 modifying the document to render harmless any identified 

18 potentially harmful active content before presenting the document to the 

19 computing device. 

1 2. (Original) The method of claim 1, further comprising syntactically 

2 examining the document and placing the document in a valid form before 

3 comparing the document with each definition. 

1 3. (Original) The method of claim 1, further comprising transmitting the 

2 modified document to the computing device over a network after the 

3 potentially harmful active content is rendered harmless. 
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1 4. (Currently amended) The method of claim 3, wherein each definition is 

2 listed in the text configuration file in a same language structure and 

3 schema as the document. 

1 5. (Currently amended) The method of claim 3, further comprising mapping 

2 each definition in the text configuration file into a same language and 

3 schema as the document. 

1 6. (Currently amended) The method of claim 1, further comprising 

2 r e pr e s e nting wherein the data structure representation of the document 

3 as is a first document object model (DOM) tree and wherein the data 

4 structure representation of the one or more definitions in the text 

5 configuration file as is a second DOM tree. 

1 7.-22. (Cancelled) 

1 23. (Currently amended) The method of claim 1, wherein the editable text 

2 configuration file is an XML (extensible markup language) file. 

1 24. (Currently amended) The method of claim I, wherein one or more of the 

2 definitions of potentially harmful active content identifies potentially 

3 harmful active content that may be present at a level of a tag in the 

4 document. 

1 25. (Currently amended) The method of claim 1, wherein one or more of the 

2 definitions of potentially harmful active content identifies potentially 

3 harmful active content that may be present at a level of an attribute in 

4 the document. 

1 26. (Currently amended) The method of claim 1, wherein one or more of the 

2 definitions of potentially harmful active content identifies potentially 
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3 harmful active content that may be present at a level of an attribute 

4 value in the document. 

1 27. (Currently amended) The method of claim 1, wherein each definition is 

2 listed in the text configuration file in a different language structure and 

3 different schema from the document. 

1 28. (Previously presented) The method of claim 1, wherein the action 

2 specified by a given definition is to remove an attribute from the 

3 document. 

1 29. (Previously presented) The method of claim 1, wherein the action 

2 specified by a given definition is to replace the identified potentially 

3 harmful active content in the document with active content known to be 

4 harmless. 

1 30. (Previously presented) The method of claim 1, wherein the action 

2 specified by a given definition is to remove a tag from the document. 

1 31. (New) The method of claim 1 , further comprising identifying potentially 

2 harmful active content by finding a node in the data structure 

3 representation of the one or more definitions that matches a node in the 

4 data structure representation of the document. 



